Cryptocurrency exchange Coinbase announced that it keeps over 99 percent of customer assets in cold storage to protect user funds from cyber threats. According to a corporate blog post, the company’s systems and customer assets remain completely unaffected following a recent hot wallet security incident reported by Binance.
Coinbase maintains only a small percentage of funds in active hot wallets to fulfill daily customer withdrawal and trading demands. These balances are continuously monitored and rebalanced through a combination of personnel, automated services, and cryptographic systems, while dedicated custody vault assets remain entirely offline and onchain segregated.
To secure asset transfers, the exchange implements a layered control framework, including distributed key protection where private keys are split and never reconstructed in full during signing. Furthermore, the platform utilizes strict rate limits, automated anomaly detection, and cryptographic kill switches capable of taking signing keys completely offline when suspicious activity is flagged. Internal security protocols enforce limited standing access, mandatory multi-party consensus, and phishing-resistant authentication for all sensitive operations.
The company emphasized that all customer assets are held on a 1:1 basis, remain explicit customer property, and are never lent or utilized without explicit customer instruction. As of September 30, 2026, Coinbase reported $377 billion in assets on its platform, alongside $8.6 billion in cash and cash equivalents and $2.2 billion in crypto assets held for investment.
Regulated globally with over 80 licenses, Coinbase operates its U.S. custodian services under the New York Department of Financial Services and is authorized under MiCA in Europe. Led by Chief Security Officer Jeff Lunglhofer, the security team continues to adapt its infrastructure to address emerging threats, including the rapidly evolving security landscape driven by advancements in artificial intelligence.
